Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/43632CB41BE011EEBAABED0E4AD9E6FC.roa
File:                     43632CB41BE011EEBAABED0E4AD9E6FC.roa (raw, json)
Hash identifier:          1Bubk+H1KtbAmUhfG/am6J8T4qqKiI8NAuZFIXAfJ4E=
Subject key identifier:   D6:12:82:AB:91:EF:C6:30:FB:8D:B2:F7:60:78:95:D0:BD:5E:8E:AB
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       16
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/43632CB41BE011EEBAABED0E4AD9E6FC.roa
Signing time:             Thu 06 Jul 2023 09:34:11 +0000
ROA not before:           Thu 06 Jul 2023 09:34:07 +0000
ROA not after:            Wed 06 Jul 2033 09:34:07 +0000
asID:                     37105
IP address blocks:        196.46.64.0/24 maxlen: 24
                          196.46.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 03:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Jul  6 09:34:07 2023 GMT
            Not After : Jul  6 09:34:07 2033 GMT
        Subject: CN=64a68a93-f6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:52:e9:21:f8:6c:17:80:4e:e0:76:5d:a6:
                    82:b3:c6:4b:72:81:78:9d:04:80:ff:b8:1e:73:6b:
                    4a:b4:ab:38:a7:a8:84:2f:5e:42:aa:42:9f:d1:1c:
                    22:41:70:aa:19:6f:4c:e6:99:6a:07:15:59:41:d5:
                    de:c0:1b:f5:51:ab:54:dd:d0:d6:4c:ae:ce:cb:a2:
                    3d:97:8f:d1:40:cc:df:b3:4e:65:39:e6:c5:87:11:
                    88:09:76:cf:c9:09:1a:2d:9d:dd:b4:56:8e:45:53:
                    21:6e:2f:96:88:9d:87:31:51:67:7f:df:02:72:d1:
                    6d:49:8e:61:22:6d:0a:c3:f2:fa:3f:49:a1:a6:e2:
                    6f:c3:1f:35:4d:8d:33:ed:e8:f0:2b:0d:1e:03:5a:
                    96:c9:4f:6c:e5:71:95:8a:98:79:b3:5a:6e:fa:4b:
                    94:6f:b3:f5:62:65:97:25:1f:37:bf:20:82:ba:f1:
                    bd:10:2b:1c:e6:a9:52:ba:a3:90:ca:da:10:c9:88:
                    4a:88:d4:98:3d:e4:b5:32:2e:10:e8:68:af:c8:e1:
                    ea:a9:c9:d7:91:39:51:7a:a8:bb:5a:94:a5:32:d9:
                    e8:bf:08:ea:b7:85:2f:d2:1d:e5:5f:a5:a4:a8:7e:
                    41:76:5d:0d:7f:22:7c:9b:2d:68:ec:f7:88:aa:4f:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:12:82:AB:91:EF:C6:30:FB:8D:B2:F7:60:78:95:D0:BD:5E:8E:AB
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/43632CB41BE011EEBAABED0E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:4b:b0:83:ca:ba:24:e5:81:9d:02:75:f7:da:3c:8c:62:
         40:06:58:99:3d:38:74:d3:18:e2:60:8f:1c:88:37:6a:47:80:
         80:4d:fa:28:4f:a0:e9:d3:1f:6a:97:45:65:b6:9c:3d:43:c2:
         6d:72:82:d1:5d:0d:cb:ee:44:37:f1:47:61:9c:3c:85:b1:4e:
         9f:9c:83:6e:d9:05:d3:44:f4:2d:3b:d7:a3:4d:2f:02:70:94:
         0e:50:fd:a4:48:f3:31:aa:d2:19:60:4e:6b:5d:ff:75:29:84:
         13:01:6d:f3:e0:50:b4:87:c4:1b:01:fa:be:64:ec:85:55:bd:
         b8:95:dc:73:e6:2c:dc:47:46:f9:1f:9a:3f:20:13:97:13:f7:
         69:b0:d1:2c:e5:91:cd:2a:14:76:f6:02:0f:3e:d2:6d:93:06:
         b8:a3:b6:56:6d:0b:a7:fa:bd:04:d6:58:ca:b1:65:cc:0c:b2:
         68:2c:ae:a2:81:f1:59:b0:49:17:98:c4:98:cb:5b:d2:bc:cc:
         6b:eb:dd:51:7f:45:d9:50:36:b8:d4:1b:97:ec:29:bb:97:c6:
         4d:72:10:d4:ad:43:c5:35:45:59:79:69:c0:68:2b:67:c3:41:
         f5:a5:36:d5:aa:41:ee:89:6e:9e:1c:0a:94:00:20:69:bc:19:
         5a:2f:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org